Switched to self-hosted Bitwarden on my own domain behind a VPN. Everything on disk is encrypted.